CVE-2020-10740: Deserialization of Untrusted Data

May 24, 2022 (updated July 13, 2023)

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

References

bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10740
github.com/advisories/GHSA-vrmw-2xhq-hrmp
nvd.nist.gov/vuln/detail/CVE-2020-10740

Code Behaviors & Features

Detect and mitigate CVE-2020-10740 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →